This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          6Od3EZ5hwbqYdtUgDBs2eZgTZIOI0uApmfcyCi0J7qE=
Subject key identifier:   FF:D6:42:8F:4F:0A:33:15:0E:C1:5F:5F:75:F6:AE:9B:5F:F1:B4:AC
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019BF4992280CEFD1EED31817EA0ED6E361A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0C99
Signing time:             Sun 25 Jan 2026 10:00:35 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:35 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:35 +0000
Files and hashes:         1: 3OtLzFbkywxj4bXOGTjeuqnS8SE.roa (hash: 2jeNVVe54GmP1BBES9FaoxamDKF2feBho25yOVUyHaw=)
                          2: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
                          3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: RPRda+uo6FLiklHFePHOgbgMWnDXCJ/QVINQh59p9ks=)
                          4: KkqLmE0N7-8rgtoRGKAsSy0XFwA.roa (hash: 8ZgmxpOPcx1KDgg1Y8A7vaKcj1bybyszDrY+4z+o80k=)
                          5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
                          6: nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa (hash: x3mP5EeqVaKIolXtodkSvvchfGdilfiKxpYM+QBGVxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:22:80:ce:fd:1e:ed:31:81:7e:a0:ed:6e:36:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Jan 25 10:00:35 2026 GMT
            Not After : Jan 26 10:00:35 2026 GMT
        Subject: CN=ffd6428f4f0a33150ec15f5f75f6ae9b5ff1b4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:92:02:1a:45:1c:71:43:f2:83:87:cd:df:
                    9d:81:06:1f:6c:53:7f:e6:53:0d:a6:40:da:40:69:
                    86:84:20:41:34:db:99:cb:e5:08:02:a0:b2:dd:7f:
                    f4:ab:49:ed:4c:f8:f5:00:b9:74:ee:eb:c5:2e:dc:
                    68:e8:ab:85:c9:8d:a5:ff:bd:fc:8a:cc:0f:75:68:
                    55:90:3e:c5:11:c1:c4:8a:2c:73:ff:6d:2a:53:7c:
                    d1:2a:97:61:9c:6d:fa:44:45:c2:25:37:e1:20:af:
                    8c:21:0b:d5:44:29:77:59:36:20:00:08:bc:6d:a0:
                    6f:f1:b4:3e:f5:de:8e:fb:38:11:ed:89:9c:da:b5:
                    64:d7:f1:58:19:1e:18:e8:34:10:15:14:e2:92:e1:
                    50:eb:a6:89:78:04:77:7a:25:36:7b:25:04:2e:cc:
                    76:fa:8e:09:c0:83:a9:23:2e:00:4e:23:12:f1:01:
                    02:b7:28:83:2c:f3:f8:d7:be:53:17:56:d4:30:ef:
                    fa:2e:0d:42:d1:78:37:21:6d:8f:47:7b:2a:71:4c:
                    17:de:5e:5a:71:ec:c8:55:dd:bb:be:c2:4a:ae:e6:
                    af:24:3e:68:0f:7c:98:8a:55:61:af:1b:17:e8:79:
                    02:5e:f8:a0:5c:1e:36:9e:8b:be:58:12:3e:50:99:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:42:8F:4F:0A:33:15:0E:C1:5F:5F:75:F6:AE:9B:5F:F1:B4:AC
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:db:5d:0d:7b:9d:d7:cd:d2:2c:50:42:f2:68:ec:71:55:
         47:2d:b7:06:ac:1d:2e:c3:dd:96:e6:ea:86:5f:87:6b:9e:c9:
         46:2c:19:bc:af:a5:1a:88:99:f6:eb:c7:44:90:4c:85:fd:07:
         b9:e8:fc:a2:09:58:96:a5:48:2a:9e:ea:5a:16:e8:4a:2c:cd:
         51:5d:f3:32:b9:06:d1:86:2a:c8:87:4a:b2:32:7e:9e:e3:72:
         8b:0d:99:5c:2a:ad:66:05:4d:fc:6d:f7:0f:cb:6f:4a:23:a5:
         3b:d3:72:c8:ff:90:78:66:61:f2:ea:c1:d9:79:c8:c8:76:2b:
         c4:d9:a2:03:86:64:2c:ff:e3:ef:11:97:3b:9c:a7:41:18:7b:
         ba:2f:81:82:be:11:99:56:bc:50:6d:19:e1:25:61:69:1f:9f:
         69:c2:a5:c5:76:c1:2a:1e:98:38:3a:69:e9:7b:13:4d:e6:81:
         d5:5c:86:07:77:ae:8c:e0:17:12:9c:0f:dc:99:0c:a9:e0:41:
         91:ed:f1:c1:32:fe:e1:c8:f7:5c:29:e4:7f:c6:bd:9e:d6:fe:
         84:2b:46:22:29:40:ce:c9:18:15:1f:22:43:a4:be:84:9c:6c:
         fb:da:25:35:ca:d0:7f:24:5f:3f:8b:f1:d1:1b:c5:d7:2e:5b:
         41:68:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:05 2026 by rpki-client